I’m more than a little baffled here. I’ve followed the instructions on the latest documentation https://help.mikrotik.com/docs/spaces/ROS/pages/224559120/WiFi#WiFi-WiFiCAPsMAN but I only get partway there.
CAPsMAN is running on the main router, using the VLANS :
- LAN: 30
- MGMT: 31
- IOT: 32
It is connected to a distribution switch that has a hybrid port with PVID 31 and the two other VLANs tagged. Connectivity is good as the HAP is getting a DHCP address and can connect to the CAPsMAN.
But on the Wifi interfaces I get the message “managed by CAPsMAN 192.168.31.254, traffic processing on CAP”, but it never creates an SSID. I’m guessing that I’m missing something that will be obvious in hindsight, but if anyone has any ideas…
Here’s the configuration on the HAP side of things:
/interface bridge
add admin-mac=F4:1E:57:2C:F3:35 auto-mac=no name=internal-bridge vlan-filtering=yes
/interface wifi
# managed by CAPsMAN 192.168.31.254, traffic processing on CAP
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap datapath=*1 disabled=no
# managed by CAPsMAN 192.168.31.254, traffic processing on CAP
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap datapath=*1 disabled=no
/interface bridge port
add bridge=internal-bridge interface=ether1
add bridge=internal-bridge interface=ether2
add bridge=internal-bridge interface=ether3
add bridge=internal-bridge interface=ether4
add bridge=internal-bridge interface=ether5
/interface bridge vlan
add bridge=internal-bridge tagged=all vlan-ids=30
add bridge=internal-bridge tagged=all vlan-ids=32
/interface wifi cap
set caps-man-addresses=192.168.31.254 discovery-interfaces=ether1 enabled=yes
/ip dhcp-client
add comment=defconf interface=internal-bridge
And here the wifi section from the router:
/interface wifi
# operated by CAP 192.168.31.4, traffic processing on CAP
# SSID not set
add configuration.mode=ap disabled=no name=cap-wifi1 radio-mac=F4:1E:57:2C:F3:3B
# operated by CAP 192.168.31.4, traffic processing on CAP
# SSID not set
add configuration.mode=ap disabled=no name=cap-wifi2 radio-mac=F4:1E:57:2C:F3:3A
/interface wifi datapath
add bridge=internal-bridge disabled=no name=IG-LAN vlan-id=30
add bridge=internal-bridge disabled=no name=IG-IOT vlan-id=32
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=IG-LAN
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=IG-IOT
/interface wifi configuration
add country=France datapath=IG-LAN disabled=no name=IG-LAN security=IG-LAN ssid=IG-LAN
add country=France datapath=IG-IOT disabled=no name=IG-IOT security=IG-IOT ssid=IG-IOT
/interface wifi capsman
set ca-certificate=auto enabled=yes interfaces=VLAN_MGMT package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=IG-LAN slave-configurations=IG-IOT supported-bands=\
2ghz-ax,5ghz-ac,5ghz-ax